Privacy policy

Last updated: 15 October 2026

This policy explains how we collect, use, share and protect your personal information, and what rights you have. It is written to comply with the Protection of Personal Information Act 4 of 2013 ("POPIA").

1. Who is responsible for your information

The responsible party is Stephan Nel, a sole proprietor trading as Throttle Dynamics.

Address: 1 Wisteria Crescent, Centurion, Gauteng, 0172
Email: throttledynamicsza@gmail.com
Telephone and WhatsApp: +27 64 502 8725

Information Officer: Stephan Nel. Under POPIA, the Information Officer of a sole proprietorship is the owner, so no separate appointment is needed. Contact: throttledynamicsza@gmail.com.

2. What information we collect

When you order: your name, email address, telephone number, delivery and billing addresses, order history, and any vehicle details you give us for fitment.

When you pay by card: you enter your card details on our checkout page, and they are processed by our payment provider, Paystack. We receive confirmation that the payment succeeded and limited details such as the card type and last four digits. We never receive or store your full card number, expiry date or CVV.

When you pay by EFT: you pay from your own bank. Our bank statement shows us the payer's name, the payment reference and the amount, and we keep any proof of payment you send us.

When we refund an EFT payment: the bank account details you give us for the refund (account holder, bank, account number and branch code). We use these only to pay your refund. Card refunds go back to your card through Paystack.

When you contact us: the content of your message and any details you give us, by email, the contact form or WhatsApp.

When you subscribe to marketing: your email address and, if you provide them, your vehicle details.

Automatically, when you browse: IP address, browser and device type, pages viewed, referring site, and similar information collected through cookies and comparable technologies. If you accept marketing cookies, this includes information collected by the Meta Pixel (see sections 4 and 10).

3. Why we process it, and on what basis

Purpose	Lawful basis under POPIA
Processing and delivering your order	Necessary to perform our contract with you (s.11(1)(b))
Returns, refunds and warranty claims	Contract performance and legal obligation (s.11(1)(b) and (c))
Answering fitment and support questions	Your consent, or our legitimate interests (s.11(1)(a) and (f))
Keeping accounting and transaction records	Legal obligation (s.11(1)(c))
Fraud prevention and site security	Legitimate interests (s.11(1)(f))
Marketing emails	Your consent, which you may withdraw at any time (s.11(1)(a), s.69)
Analytics and advertising cookies	Your consent, given or refused in our cookie banner, which you may change at any time (s.11(1)(a))

4. Who we share it with

Shopify — our e-commerce platform, which hosts this store and processes orders on our behalf. Shopify may also use store data together with its other data to improve its services and to personalise and target advertising for this store, under Shopify's own terms. No other merchant can see your data.
Paystack — our card payment provider, which processes card payments made at checkout, and card refunds, under its own privacy policy. We never see or store your full card details.
Our bank — which receives EFT payments and, when we refund an EFT payment, processes the transfer to the account details you give us.
Courier companies — your name, delivery address and phone number, to deliver your order.
Meta (Facebook and Instagram) — where you have accepted marketing cookies in our cookie banner, we use the Meta Pixel and Meta's Conversions API to measure our adverts and to show them to people likely to be interested. These share information such as the pages you view, items you add to your cart, purchases, your IP address and browser details and, for purchases, your email address and phone number in scrambled (hashed) form so Meta can match the event to an account. Meta Platforms Ireland Limited uses this information under its own privacy policy.
Other email, analytics and advertising providers — where you have consented.
Professional advisers and authorities — where the law requires it.

We do not sell your personal information. Apart from the advertising cookies described above, which you can decline, we do not share it with third parties for their own marketing.

5. Information sent outside South Africa

Some of these providers store or process information outside South Africa. Shopify, for example, stores this store's data in the United States. Meta processes advertising information in Ireland and the United States. In line with section 72 of POPIA, we transfer personal information across borders only where the recipient is bound by law, binding corporate rules or agreement to an adequate level of protection, or where the transfer is necessary to perform our contract with you.

6. How long we keep it

Order and transaction records: for the period required by South African tax law, currently five years.
Bank details for a refund: only until the refund has been paid and confirmed, apart from what our transaction records must show.
Warranty records: for the two-year warranty period plus a reasonable period afterwards.
Marketing subscriptions: until you unsubscribe, after which we keep a suppression record so we don't contact you again.
Support correspondence: as long as needed to resolve the matter, plus a reasonable period.

When information is no longer needed and no law requires us to keep it, we delete or de-identify it.

7. How we protect it

As section 19 of POPIA requires, we take appropriate technical and organisational measures to protect personal information, including encrypted connections to this website, restricted access to customer data, and reputable service providers who maintain their own security. If a security compromise affects your information, we will notify you and the Information Regulator as section 22 requires.

8. Your rights

Under POPIA you have the right to:

ask what personal information we hold about you, and receive a copy;
ask us to correct inaccurate, misleading or out-of-date information;
ask us to delete information we are no longer entitled to keep;
object to processing based on legitimate interests;
withdraw consent at any time, where we rely on consent;
not be subject to a decision based solely on automated processing; and
complain to the Information Regulator.

To exercise any of these rights, email throttledynamicsza@gmail.com. We may need to verify your identity first.

9. Marketing

We send marketing emails only to people who have asked for them, or to existing customers about similar products, as section 69 of POPIA permits. Every marketing email has an unsubscribe link. Unsubscribing does not stop messages about an order you have placed.

10. Cookies

We use cookies that are strictly necessary to run the store, such as keeping your cart working. With your permission, we also use analytics and advertising cookies, including the Meta Pixel, which measures our Facebook and Instagram adverts. When you first visit, our cookie banner asks for your choice, and marketing cookies are only set if you accept them. You can change your choice at any time using the "Cookie preferences" link at the bottom of every page, and you can block or delete cookies through your browser settings. Blocking strictly necessary cookies may stop the store from working.

11. Children

This store is not directed at children, and we do not knowingly collect a child's personal information without the consent of a competent person. If you believe we have, contact us and we will delete it.

12. Complaints

Please raise any concern with us first at throttledynamicsza@gmail.com. You also have the right to complain to:

The Information Regulator (South Africa)
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
Complaints: POPIAComplaints@inforegulator.org.za
General enquiries: enquiries@inforegulator.org.za
Website: inforegulator.org.za